pub proof fn kvirt_alloc_succeeds(area_size: usize)
0 < area_size <= usize::MAX / 2,
kvirt_alloc_spec(area_size).is_ok(),